What does exfiltration mean?
Exfiltration is the act of secretly withdrawing a person or thing from a dangerous, hostile, or restricted environment, most often used in military and intelligence contexts — for example, the covert removal of an agent or downed pilot from enemy territory. Since the late twentieth century the word has also become a standard term in cybersecurity, where it denotes the unauthorized transfer of sensitive data out of a secure network, whether through hacking, malware, or insider theft. The word derives from Latin roots meaning essentially 'to filter out', and stands in direct opposition to its sibling term 'infiltration', which describes secret entry rather than secret departure. Exfiltration carries a formal, technical register; it appears chiefly in news reports on espionage and breaches, official communications, and professional security writing. Its precision makes it valuable: where 'escape' or 'leak' are general, exfiltration specifically implies planning, secrecy, and movement across a boundary that others are trying to control.
nounThe act or process of withdrawing a person or thing secretly and covertly from a dangerous or restricted place, especially by an enemy or hostile authority; in computing, the unauthorized transfer of data out of a secure system or network.
- The covert removal of a person, especially an agent or soldier, from hostile or dangerous territory.
- The unauthorized extraction or theft of data from a computer system or network.
"The intelligence officers planned the agent's exfiltration under cover of darkness."
"The pilot's nighttime exfiltration behind enemy lines took three days to arrange."
"Security analysts traced the data exfiltration to a compromised employee login."
"The exfiltration of the refugees was carried out under cover of darkness."
The plural is grammatically standard but relatively rare; 'exfiltration' is most often treated as an uncountable process noun, though plurals appear when discussing multiple distinct incidents or operations.
"The audit revealed several exfiltrations of client data over the preceding year."
The same Latin root that gives us 'filter' gives us 'exfiltration' — spies slipping past guards and hackers siphoning secrets are, linguistically speaking, just un-filtering themselves out.
Reviewed by Deb Chak, Editor. AI-assisted content curated by RJS Tech Solutions LLP.
Etymology of exfiltration
Exfiltration derives from the Latin verb 'ex-' (out) combined with 'filtrare', from 'filtrum', a piece of felt used as a strainer — the same root that gave English the word 'filter'. It developed as the counterpart to 'infiltration', which entered English in the mid-eighteenth century from French. The term became established in twentieth-century military and intelligence vocabulary before extending into computing jargon for unauthorized data transfers. Cognates include 'filter', 'filtrate', and 'infiltrate', all tracing back to the same Latin source.
Related word forms
How exfiltration is actually used
Originally a military and intelligence term with a formal register, 'exfiltration' has expanded into cybersecurity contexts since the late 20th century. In cyber usage it often carries a neutral, technical connotation when describing security testing, but a negative one when describing attacks. It is generally used in formal or professional writing rather than casual conversation.
Easily confused with exfiltration
Infiltration is secretly entering or penetrating a place or organization, whereas exfiltration is secretly leaving or removing someone/something from it.